fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@jridgewell/trace-mapping (source)	^0.3.30 -> ^0.3.31
@rolldown/pluginutils (source)	^1.0.0-beta.36 -> ^1.0.0-beta.37
@sveltejs/vite-plugin-svelte (source)	^6.1.4 -> ^6.2.0
@types/node (source)	^22.18.1 -> ^22.18.3
@types/react (source)	^19.1.12 -> ^19.1.13
axios (source)	^1.11.0 -> ^1.12.2
baseline-browser-mapping	^2.7.4 -> ^2.8.3
browserslist	^4.25.4 -> ^4.26.0
debug	^4.4.1 -> ^4.4.3
eslint-plugin-n	^17.21.3 -> ^17.22.0
globals	^16.3.0 -> ^16.4.0
magic-string	^0.30.18 -> ^0.30.19
miniflare (source)	^4.20250902.0 -> ^4.20250906.2
pnpm (source)	10.15.1 -> 10.16.1
preact (source)	^10.27.1 -> ^10.27.2
svelte (source)	^5.38.7 -> ^5.38.10
typescript-eslint (source)	^8.42.0 -> ^8.43.0
vite (source)	^7.1.4 -> ^7.1.5
vitepress-plugin-llms	^1.7.4 -> ^1.7.5
vue-tsc (source)	^3.0.6 -> ^3.0.7

---

Release Notes

jridgewell/sourcemaps (@​jridgewell/trace-mapping)

v0.3.31

Compare Source

• Improve the performance of generatedPositionFor: #​42

Full Changelog: jridgewell/sourcemaps@trace-mapping/0.3.30...trace-mapping/0.3.31

rolldown/rolldown (@​rolldown/pluginutils)

v1.0.0-beta.37

Compare Source

🚀 Features

• partial align with const inline strategy with oxc in smart mode (#​6126) by @​IWANABETHATGUY
• dev: use PathsMut for non-debounced RecommendedWatcher (#​6120) by @​sapphi-red
• dev: return whether the build is already scheduled from scheduleBuildIfStale method (#​6116) by @​sapphi-red
• handle errors from BundlerBuilder#build (#​6104) by @​shulaoda
• add debounceTickRate option for debounced watchers (#​6113) by @​hyf0
• support full build in incrementalBuild mode (#​6098) by @​IWANABETHATGUY
• add compare_contents_for_polling option to dev watcher (#​6108) by @​hyf0
• dev: add scheduleBuildIfStale method to DevEngine (#​6087) by @​sapphi-red
• dev: return changed files in onHmrUpdates callback (#​6086) by @​sapphi-red
• support function config with custom CLI arguments (#​6076) by @​IWANABETHATGUY
• improve MISSING_EXPORT warning to suggest type modifier (#​6085) by @​sapphi-red
• crates/rolldown_watcher: introduce PathsMut to batch watch/unwatch behaviors (#​6075) by @​hyf0
• enable treeshake.commonjs by default (#​6072) by @​IWANABETHATGUY
• dev: add debounce control and PollWatcher support to DevWatchOptions (#​6070) by @​hyf0

🐛 Bug Fixes

• use kqueue for file watch on mac (#​6124) by @​sapphi-red
• use patched notify for better file change event debouncing (#​6125) by @​sapphi-red
• support passing all js primitive value for alias plugin (#​6123) by @​IWANABETHATGUY
• track spans in member expression properties for accurate sourcemaps (#​6100) by @​IWANABETHATGUY
• correctly handle inlined CommonJS exports in member expressions (#​6090) by @​IWANABETHATGUY
• dev: ensure patch file names to be unique (#​6096) by @​sapphi-red
• dev: normalize slash on Windows before comparing paths (#​6095) by @​sapphi-red
• dev/watch: debounce duration should default to 10 (#​6078) by @​hyf0

🚜 Refactor

• simplify __export runtime helper to create target object internally (#​6114) by @​IWANABETHATGUY
• simplify module_namespace construction second try (#​6118) by @​IWANABETHATGUY
• simplify module_namespace construction (#​5939) by @​IWANABETHATGUY
• optimize member expression creation in AstSnippet (#​6091) by @​IWANABETHATGUY
• test-dev-server: sensible watcher configuration for CI env (#​6077) by @​hyf0

🧪 Testing

• dev: apply HMR edits on Windows (#​6094) by @​sapphi-red

⚙️ Miscellaneous Tasks

• Revert "chore: adjust breaking change template of cliff (#​6069)" (#​6130) by @​IWANABETHATGUY
• test-dev-server: improve hmr test configuration (#​6115) by @​hyf0
• deps: update dependency rolldown-plugin-dts to v0.16.2 (#​6128) by @​renovate[bot]
• Revert "refactor: simplify module_namespace construction (#​5939)" (#​6117) by @​IWANABETHATGUY
• test-dev-server: optimize test log output (#​6107) by @​hyf0
• enable compare_contents_for_polling and update poll interval for CI test-dev-server (#​6110) by @​hyf0
• deps: update dependency vite to v7.1.5 [security] (#​6111) by @​renovate[bot]
• fix warnings reported by just lint (#​6105) by @​shulaoda
• deps: update dependency tsdown to v0.15.0 (#​6102) by @​renovate[bot]
• use debug builds for browser tests in CI (#​6092) by @​hyf0
• test-dev-server: update polling interval and add retry logic for CI tests (#​6088) by @​hyf0
• adjust breaking change template of cliff (#​6069) by @​IWANABETHATGUY

◀️ Revert

• "fix: replace_plugin does not work as expected with .ts config (#​5920)" (#​6074) by @​IWANABETHATGUY

sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v6.2.0

Compare Source

Minor Changes

• feat(rolldown-vite): enable optimization.inlineConst by default to ensure treeshaking works with esm-env in svelte (#​1207)

axios/axios (axios)

v1.12.2

Compare Source

Bug Fixes

• fetch: use current global fetch instead of cached one when env fetch is not specified to keep MSW support; (#​7030) (cf78825)

Contributors to this release

• Dmitriy Mozgovoy
• Noritaka Kobayashi

v1.12.1

Compare Source

Bug Fixes

• types: fixed env config types; (#​7020) (b5f26b7)

Contributors to this release

• Dmitriy Mozgovoy

web-platform-dx/baseline-browser-mapping (baseline-browser-mapping)

v2.8.3

Compare Source

v2.8.2

Compare Source

v2.8.1

Compare Source

v2.8.0: - Facebook and Instagram apps

Compare Source

What's Changed

• Add support for Facebook and Instagram Android apps by @​tonypconway in #​99

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.7.4...v2.8.0

browserslist/browserslist (browserslist)

v4.26.0

Compare Source

• Added Baseline queries (by @​tonypconway).

debug-js/debug (debug)

v4.4.3

Compare Source

Functionally identical release to 4.4.1.

Version 4.4.2 is compromised. Please see #​1005.

eslint-community/eslint-plugin-n (eslint-plugin-n)

v17.22.0

Compare Source

🌟 Features

• Add missing features from node 20.19.0 (#​473) (fd0c192)
• support latest node 22 (#​474) (0ab562b)

🩹 Fixes

• ci: bump markdowncli-lint version (#​468) (91a56d0)
• no-unsupported: URL.createObjectURL, URL.revokeObjectURL are supported (#​471) (844155c)

sindresorhus/globals (globals)

v16.4.0

Compare Source

• Update globals (#​309) 8b8a2d6

---

rich-harris/magic-string (magic-string)

v0.30.19

Compare Source

Bug Fixes

• this.outro need to be mapped (#​300) (8852c8d)

Features

• replace(All) support replacement for functions when the first parameter is a string (#​304) (fd1d887)

cloudflare/workers-sdk (miniflare)

v4.20250906.2

Compare Source

Minor Changes

• #​10596 735785e Thanks @​penalosa! - Add Miniflare & Wrangler support for unbound Durable Objects

v4.20250906.1

Compare Source

Minor Changes

• #​10119 336a75d Thanks @​dxh9845! - Add support for dynamically loading 'external' Miniflare plugins for unsafe Worker bindings (developed outside of the workers-sdk repo)

Patch Changes

• #​10494 e2b838f Thanks @​pombosilva! - Include workflow binding name in workflow plugin.

v4.20250906.0

Compare Source

Patch Changes

• #​10568 dac302c Thanks @​dependabot! - chore: update dependencies of "miniflare" package

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20250902.0	1.20250906.0

pnpm/pnpm (pnpm)

v10.16.1

Compare Source

Patch Changes

• The full metadata cache should be stored not at the same location as the abbreviated metadata. This fixes a bug where pnpm was loading the abbreviated metadata from cache and couldn't find the "time" field as a result #​9963.
• Forcibly disable ANSI color codes when generating patch diff #​9914.

v10.16.0

Compare Source

Minor Changes

• There have been several incidents recently where popular packages were successfully attacked. To reduce the risk of installing a compromised version, we are introducing a new setting that delays the installation of newly released dependencies. In most cases, such attacks are discovered quickly and the malicious versions are removed from the registry within an hour.

  The new setting is called minimumReleaseAge. It specifies the number of minutes that must pass after a version is published before pnpm will install it. For example, setting minimumReleaseAge: 1440 ensures that only packages released at least one day ago can be installed.

  If you set minimumReleaseAge but need to disable this restriction for certain dependencies, you can list them under the minimumReleaseAgeExclude setting. For instance, with the following configuration pnpm will always install the latest version of webpack, regardless of its release time:

  minimumReleaseAgeExclude:
    - webpack

  Related issue: #​9921.

• Added support for finders #​9946.

  In the past, pnpm list and pnpm why could only search for dependencies by name (and optionally version). For example:

  pnpm why minimist
  

  prints the chain of dependencies to any installed instance of minimist:

  verdaccio 5.20.1
  ├─┬ handlebars 4.7.7
  │ └── minimist 1.2.8
  └─┬ mv 2.1.1
    └─┬ mkdirp 0.5.6
      └── minimist 1.2.8
  

  What if we want to search by other properties of a dependency, not just its name? For instance, find all packages that have react@17 in their peer dependencies?

  This is now possible with "finder functions". Finder functions can be declared in .pnpmfile.cjs and invoked with the --find-by=<function name> flag when running pnpm list or pnpm why.

  Let's say we want to find any dependencies that have React 17 in peer dependencies. We can add this finder to our .pnpmfile.cjs:

  module.exports = {
    finders: {
      react17: (ctx) => {
        return ctx.readManifest().peerDependencies?.react === "^17.0.0";
      },
    },
  };

  Now we can use this finder function by running:

  pnpm why --find-by=react17
  

  pnpm will find all dependencies that have this React in peer dependencies and print their exact locations in the dependency graph.

  @​apollo/client 4.0.4
  ├── @​graphql-typed-document-node/core 3.2.0
  └── graphql-tag 2.12.6
  

  It is also possible to print out some additional information in the output by returning a string from the finder. For example, with the following finder:

  module.exports = {
    finders: {
      react17: (ctx) => {
        const manifest = ctx.readManifest();
        if (manifest.peerDependencies?.react === "^17.0.0") {
          return `license: ${manifest.license}`;
        }
        return false;
      },
    },
  };

  Every matched package will also print out the license from its package.json:

  @​apollo/client 4.0.4
  ├── @​graphql-typed-document-node/core 3.2.0
  │   license: MIT
  └── graphql-tag 2.12.6
      license: MIT
  

Patch Changes

• Fix deprecation warning printed when executing pnpm with Node.js 24 #​9529.
• Throw an error if nodeVersion is not set to an exact semver version #​9934.
• pnpm publish should be able to publish a .tar.gz file #​9927.
• Canceling a running process with Ctrl-C should make pnpm run return a non-zero exit code #​9626.

preactjs/preact (preact)

v10.27.2

Compare Source

Types

• Mirror non-JSX types to the 'preact' namespace (#​4904, thanks @​rschristian)

Fixes

• Address memory leak (#​4906, thanks @​JoviDeCroock)

sveltejs/svelte (svelte)

v5.38.10

Compare Source

Patch Changes

• fix: flush effects scheduled during boundary's pending phase (#​16738)

v5.38.9

Compare Source

Patch Changes

• chore: generate CSS hash using the filename (#​16740)

• fix: correctly analyze <object.property> components (#​16711)

• fix: clean up scheduling system (#​16741)

• fix: transform input defaults from spread (#​16481)

• fix: don't destroy contents of svelte:boundary unless the boundary is an error boundary (#​16746)

v5.38.8

Compare Source

Patch Changes

• fix: send $effect.pending count to the correct boundary (#​16732)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.43.0

Compare Source

🩹 Fixes

• eslint-plugin: [no-deprecated] should report deprecated exports and reexports (#​11359)

❤️ Thank You

• Victor Genaev @​mainframev

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.1.5

Compare Source

Bug Fixes

• apply fs.strict check to HTML files (#​20736) (14015d7)
• deps: update all non-major dependencies (#​20732) (122bfba)
• upgrade sirv to 3.0.2 (#​20735) (09f2b52)

okineadev/vitepress-plugin-llms (vitepress-plugin-llms)

v1.7.5

Compare Source

   🐞 Bug Fixes

• Use base path for relative path resolution in TOC generation  -  by @​iamchanii in #​74 (ed5cc)

    View changes on GitHub

vuejs/language-tools (vue-tsc)

v3.0.7

Compare Source

Bug Fixes

• fix(vscode): show welcome page only when opening a Vue file
• fix(language-core): generate slot parameters in the same way as interpolation (#​5618) - Thanks to @​KazariEX!
• fix(language-core): do not generate variables for builtin directives - Thanks to @​KazariEX!

Other Changes

• docs(vscode): add descriptions for premium feature configurations (#​5612) - Thanks to @​KazariEX!
• refactor(typescript-plugin): explicitly request parameters (#​5623)
• chore(lint): enable @typescript-eslint/no-unnecessary-condition (#​5630)
• refactor(language-server): reimplement Reactivity Visualization in typescript plugin (#​5632)
• refactor(language-server): parsing interpolations in extension client (#​5633)
• refactor(vscode): reimplement Focus Mode base on folding ranges (#​5634)
• chore(vscode): disable Focus Mode by default (#​5578)
• refactor(vscode): set delay of reactivity visualization updates to 250ms - Thanks to @​KazariEX!

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.